What *should* the Developer's role be when it comes to the minutiae of an Application Security Program? Are they spending their time on the correct things? How do we measure success?

Join Rami McCarthy and I for a discussion about how teams are handling the delegation of AppSec tasks, the sharing of knowledge, and what AppSec professionals can do to become better partners with the Engineering organization to more efficiently mitigate risks to the business.

Keep an eye on the Kondukto YouTube channel for future AppSec discussions, and reach out if you would like to sit down for a chat!

https://www.youtube.com/watch?v=V0G6PlYEItQ

It's taken me almost a year to write (and edit) my rant about categories and acronyms in cybersecurity. Which acronyms or categories annoy you the most? Security teams don't need more tools, they need efficient ways to mitigate risk and respond quickly to threats or attacks - especially now to keep up with faster development cycles.
https://www.techtarget.com/searchsecurity/opinion/Cloud-native-app-security-Ignore-acronyms-solve-problems
#cloudsecurity #applicationsecurity #appsec #cspm #sast #dast #iast #sca #sbom #ciem #asoc #dspm #aspm #cnapp #cdr #mdr #itdr #ndr #mdr #xdr #edr #cnapp #wapp #devsecops #cybersecurity #infosec #ciso #cso

They joys of bugs in hardware or firmware[1]:

A user reported updating to #Linux #kernel 6.4.y broke #iwlwifi on a Intel 3165 NIC. Bisection identified 5fc3f6c90cc ("r8169: consolidate disabling ASPM before EPHY access") as culprit.

Turns out it was not a faulty bisection, as it seems enabling #ASPM on some #Realtek chips supported by #r8169 can harm other PCI devices.

https://bugzilla.kernel.org/show_bug.cgi?id=217635#c27

[1] or maybe it one day turns out that this is caused by a bug somewhere in the #LinuxKernel

Game-changing #SnykLaunch news:

Snyk has agreed to acquire
Enso Security

Together with Insights, a new prioritization capability with code-to-cloud application intelligence, we're unveiling a new #ASPM solution

So many benefits to our #AI-driven code security intelligence, DeepCode AI and our latest feature DeepCode AI Fix!

There’s a lot of goodness today! Read the announcement for more details: https://snyk.co/ufL3G